def AaAcc.granted
import bend-osdev-apparmor@0.1.0.0/eval.bend as Evalimport Base
import bend-osdev-apparmor@0.1.0.0/perm.bend as P
139# what the grants allow and do not deny
140def AaAcc.granted(a: AaAcc) -> P.AaPerms:
141 match a:
142 case AaAcc{al, de, au, qu}:
143 P.AaPerms.minus(al, de)